● MS Managing and Securing Microsoft 365 Endpoints by using Intune (MD-102) Exam Materials

● MS Managing and Securing Microsoft 365 Endpoints by using Intune (MD-102) Exam Materials





Question #1
Comment Image Comment Image Comment Image

You have a Microsoft 365 E5 subscription and use Microsoft Intune.
You need to use a Sync bulk device action on all corporate-owned Windows devices.
What is the maximum number of devices you can include the action? (Choose one answer)

  • A. 25
  • B. 50
  • C. 100
  • D. 500
  • E. 1000
Question #2
Comment Image Comment Image Comment Image

You have a Microsoft 365 E5 subscription.
You need to use Device query to gather information about all the devices that are managed by using Microsoft Intune.
What should you do first? (Choose one answer)

  • A. Onboard the devices to Microsoft Defender for Endpoint.
  • B. Create a compliance policy for all the devices.
  • C. Onboard the devices to Endpoint analytics.
  • D. Enable Windows license verification.
Question #3
Comment Image Comment Image Comment Image

You have a Microsoft 365 subscription.
You use Microsoft Intune to manage devices.
Auto-enrollment in Intune is configured.
You have 100 Windows 11 devices in a workgroup.
You need to connect the devices to the corporate wireless network and enroll 100 new Windows 11 devices in Intune.
What should you use? (Choose one answer)

  • A. a provisioning package
  • B. a Group Policy Object (GPO)
  • C. a device configuration policy
  • D. mobile device management (MDM) automatic enrollment
Question #4
Comment Image Comment Image Comment Image

You have a hybrid deployment of Microsoft Entra that contains 50 Windows 11 devices. All the devices are enrolled in Microsoft Intune.
You discover that Group Policy settings override the settings configured in Microsoft Intune policies.
You need to ensure that the settings configured in Microsoft Intune override the Group Policy settings.
What should you do? (Choose one answer)

  • A. From the Microsoft Intune admin center, create a custom device profile.
  • B. From Group Policy Management Editor, configure the Computer Configuration settings in the Default Domain Policy.
  • C. From the Microsoft Intune admin center, create an Endpoint Protection device profile.
  • D. From Group Policy Management Editor, configure the User Configuration settings in the Default Domain Policy.
Question #5
Comment Image Comment Image Comment Image

You have a Microsoft 365 subscription that contains 500 computers that run Windows 11. The computers are Microsoft Entra joined and are enrolled in Microsoft Intune.
You plan to manage Microsoft Defender for Endpoint on the computers.
You need to prevent users from disabling Microsoft Defender for Endpoint.
What should you do? (Choose one answer)

  • A. From the Microsoft Intune admin center, create an endpoint detection and response (EDR) policy.
  • B. From the Microsoft Entra admin center, create a Conditional Access policy.
  • C. From the Microsoft Intune admin center, create an antivirus policy.
  • D. From the Microsoft Intune admin center, create an account protection policy.
Question #6
Comment Image Comment Image Comment Image

You have a Microsoft 365 subscription that contains a user named User1.
All devices are onboarded to Microsoft Defender for Endpoint. Defender for Endpoint is integrated with Microsoft Intune for security management.
You need to ensure that User1 can create and manage disk encryption policies directly from the Microsoft Defender portal. The solution must follow the principle of least privilege and minimize administrative effort.
What should you do first? (Choose one answer)

  • A. From the Microsoft Entra admin center, create a security group.
  • B. From the Microsoft Intune admin center, assign User1 the Endpoint Security Manager role.
  • C. From the Microsoft Entra admin center, assign User1 the Security Administrator role.
  • D. From the Microsoft Intune admin center, assign User1 the Endpoint Privilege Manager role.
Question #7
Comment Image Comment Image Comment Image

You have a Microsoft 365 subscription that contains a user named User1 and 500 Windows devices enrolled in Microsoft Intune.
You configure an attack surface reduction (ASR) rule and enable the rule in Warn mode.
User1 downloads a file named file1.exe. When User1 attempts to run file1.exe he receives a prompt that the content has been blocked. The user unblocks the content.
How much time will pass until the user is prompted next to unblock the content? (Choose one answer)

  • A. 10 minutes
  • B. one hour
  • C. 24 hours
  • D. one week
Question #8
Comment Image Comment Image Comment Image

You have a Microsoft 365 E5 subscription that contains 1,000 Windows 11 devices. All the devices are enrolled in Microsoft Intune.
You plan to integrate Intune with Microsoft Defender for Endpoint.
You need to establish a service-to-service connection between Intune and Defender for Endpoint.
Which settings should you configure in the Microsoft Intune admin center? (Choose one answer)

  • A. Tenant enrollment
  • B. Connectors and tokens
  • C. Premium add-ons
  • D. Microsoft Tunnel Gateway
Question #9
Comment Image Comment Image Comment Image

You have a Microsoft 365 E5 subscription that contains 150 hybrid Microsoft Entra joined Windows devices. All the devices are enrolled in Microsoft Intune.
You need to configure Delivery Optimization on the devices to meet the following requirements:

Allow downloads from the internet and from other computers on the local network.

Limit the percentage of used bandwidth to 50%.
What should you use? (Choose one answer)

  • A. a Microsoft Peer-to-Peer Networking Services Group Policy setting
  • B. a configuration profile
  • C. a Windows Update for Business Group Policy setting
  • D. an Update ring for Windows 10 and later profile
Question #10
Comment Image Comment Image Comment Image

You have a Microsoft 365 subscription that contains 500 Android devices. The devices are managed by using Microsoft Intune.
You need to ensure that you can manage software updates for the devices by using Android FOTA.
What should you do first? (Choose one answer)

  • A. Configure a connector.
  • B. Add derived credentials.
  • C. Create a compliance policy.
  • D. Add a compliance partner.